Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: NvJKMjK8mC1BlphjY9cZH4WHai8Qd+lFiUi7UkBKnLo=
Subject key identifier: B9:9F:DC:B8:E9:56:2C:AD:0F:BC:33:63:6E:DD:44:8D:D6:45:32:80
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 01965191FD586EC2C0BA5CEC4B17198C62EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 05:00:44 +0000
Manifest this update: Sun 20 Apr 2025 05:00:44 +0000
Manifest next update: Mon 21 Apr 2025 05:00:44 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: 63xMlrS7c1j9OPC3JzNr9Vjzf/Vtc//5UFLVY6CFrL4=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:fd:58:6e:c2:c0:ba:5c:ec:4b:17:19:8c:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Apr 20 05:00:44 2025 GMT
Not After : Apr 21 05:00:44 2025 GMT
Subject: CN=b99fdcb8e9562cad0fbc33636edd448dd6453280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:86:3a:0c:cb:2f:b4:5a:22:16:9e:07:4b:
77:24:a8:fb:11:68:4f:af:81:1f:29:36:50:e7:0a:
a5:b7:d5:3a:eb:42:76:b5:28:10:44:6d:0d:5c:0e:
10:dc:b3:65:29:a7:a9:b1:b3:6f:8e:40:a0:ea:08:
4d:64:72:0f:bc:e0:e5:24:f9:d6:01:f8:93:89:ac:
46:e7:c1:68:72:76:4a:18:e3:e9:5d:e6:77:42:47:
83:9d:42:e5:3b:7a:c7:9d:2b:be:2b:61:89:0b:5c:
9f:39:d2:b5:21:9c:e5:62:1f:87:7e:19:d1:42:0b:
79:62:70:22:ee:c9:df:fc:4d:91:1b:88:66:c2:ff:
42:c2:56:64:2f:14:5f:13:1f:04:88:f7:66:91:8f:
6f:a8:a6:2c:7a:44:60:b2:54:1a:e3:fd:4e:32:8a:
10:e4:39:9e:ad:33:14:e9:11:ec:be:c1:3c:39:61:
48:88:e6:89:07:03:82:ec:2d:bc:e1:4f:f4:ae:cf:
3c:0b:11:ec:1b:09:52:97:12:ed:72:3a:a1:38:26:
6c:f7:ec:e6:35:7c:3b:99:1d:5e:9c:f2:18:39:ae:
6a:aa:44:be:ce:c1:fb:71:9f:69:43:41:98:96:82:
54:98:ea:5b:a2:a5:72:ce:e3:94:e2:e7:44:df:5e:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:DC:B8:E9:56:2C:AD:0F:BC:33:63:6E:DD:44:8D:D6:45:32:80
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:90:6e:45:52:01:46:18:91:2d:54:e3:f5:48:13:f8:34:
7c:56:0d:1a:e8:ab:ad:05:a7:aa:01:08:43:da:a6:0c:67:42:
15:62:5f:f3:61:0e:96:0a:63:e7:75:a6:5b:68:12:48:c1:6c:
90:b0:80:ce:06:c9:d8:64:dd:2a:dc:6f:47:1e:79:cb:65:a7:
af:a7:86:cc:81:ee:65:92:a2:76:71:5b:2a:76:76:1d:96:bb:
e2:50:0d:20:5b:33:39:ff:09:f4:e4:de:cd:41:59:b0:8e:a2:
a2:d2:62:8c:c0:0b:a2:5c:6b:aa:c8:a3:34:97:06:48:9c:ca:
21:45:73:7e:e2:e9:cb:85:8d:c2:5b:06:90:5e:16:bb:0a:0c:
34:a6:c6:14:ef:ab:dc:3d:8e:84:a6:b1:76:be:c6:f5:a8:ca:
31:b6:97:f3:d4:89:ce:e1:bc:7c:64:1b:6d:d0:33:a0:4f:99:
06:1f:b0:8e:69:13:2b:7b:68:66:57:9a:8d:b8:5e:f1:3a:2a:
fb:c4:47:18:1c:60:58:58:31:b5:ea:ba:4c:cd:a4:82:38:11:
43:09:34:9d:de:d3:32:d0:b7:8e:f0:46:06:cb:99:fd:be:1e:
1d:62:8f:fa:c0:87:88:09:c7:d6:18:1b:1b:02:54:8e:37:88:
05:bc:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:17:48 2025 by rpki-client